Duty LXD-1380
Processes biometric data, in Romania
GDPR Article 9 and Law 190/2018 Automated Decision-Making and CNP Rulessince 2 lines
Regulation (EU) 2016/679, Art. 9; Legea nr. 190/2018, automated decision-making and national identification number provisions · Read the law's page
- Obtain explicit consent or express legal authorization, with adequate protective measures, before using genetic, biometric, or health data of a person in Romania to drive an automated decision or profile.
- If you rely on legitimate interests to process a Romanian national identification number, put in place appropriate technical and organizational measures, appoint a Data Protection Officer, set specific retention terms with deletion or review deadlines, and train staff periodically.